Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Coinbase' disclosed a bug submitted by b'whitj00' 
b'Credit Card Validation Issue'

12 Mar 2015

b'HackerOne' disclosed a bug submitted by b'guido' 
b"Substantially weakened authenticity verification when using 'Remember me for a week'"

12 Mar 2015
wont-fix

b'concrete5' disclosed a bug submitted by b'yujitounai' 
b'Stored XSS in concrete5 5.7.0.4.'

11 Mar 2015

b'Flash' disclosed a bug submitted by b'hhj4ck' 
b'Adobe Flash Player MP4 Use-After-Free Vulnerability'

11 Mar 2015

b'Flash' disclosed a bug submitted by b'hhj4ck' 
b'Adobe Flash Player Out-of-Bound Read/Write Vulnerability'

11 Mar 2015

b'Flash' disclosed a bug submitted by b'hhj4ck' 
b'Adobe Flash Player MP4 Use-After-Free Vulnerability'

11 Mar 2015

b'Coinbase' disclosed a bug submitted by b'prashanthvarma' 
b'open authentication bug'

11 Mar 2015

b'HackerOne' disclosed a bug submitted by b'dragonfly' 
b'Auto Approval of Invitation to join Team as a Team member'

11 Mar 2015

b'Vimeo' disclosed a bug submitted by b'satishb3' 
b'A user can edit comments even after video comments are disabled'

11 Mar 2015

b'Vimeo' disclosed a bug submitted by b'satishb3' 
b"A user can post comments on other user's private videos"

11 Mar 2015

b'Slack' disclosed a bug submitted by b'atom' 
b'Stored XSS in Slack.com'

09 Mar 2015

b'Vimeo' disclosed a bug submitted by b'dekeeu' 
b'Vimeo.com - reflected xss vulnerability'

09 Mar 2015

b'Twitter' disclosed a bug submitted by b'satishb3' 
b'fabric.io - app member can make himself an admin'

09 Mar 2015

b'Twitter' disclosed a bug submitted by b'satishb3' 
b'Fabric.io - an app admin can delete team members from other user apps'

09 Mar 2015

b'Vimeo' disclosed a bug submitted by b'dekeeu' 
b'player.vimeo.com - Reflected XSS Vulnerability'

09 Mar 2015

b'Twitter' disclosed a bug submitted by b'wesecureapp' 
b'XSS in original referrer after follow'

09 Mar 2015

b'Phabricator' disclosed a bug submitted by b'haquaman' 
b'Server Side Request Forgery in macro creation'

09 Mar 2015
wont-fix

b'InVision' disclosed a bug submitted by b'root_z3r0' 
b'Password reset tokens is valid after changing the password by logging in the account'

08 Mar 2015
wont-fix

b'HackerOne' disclosed a bug submitted by b'srkgupta' 
b'HTTPS is not enforced for objects stored by HackerOne on Amazon S3'

08 Mar 2015

b'Vimeo' disclosed a bug submitted by b'a7medel-ma7alawy' 
b'Full account takeover via Add a New Email to account without email verified and without password confirmation.'

06 Mar 2015
wont-fix

1 ... 724 725 726 727 728 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM